mcp-security-framework 0.1.0__py3-none-any.whl → 1.1.0__py3-none-any.whl

tests/test_integration/test_standalone_integration.py

@@ -21,7 +21,7 @@ from cryptography import x509
 from cryptography.hazmat.primitives import hashes, serialization
 from cryptography.hazmat.primitives.asymmetric import rsa
 
-from mcp_security_framework.examples.standalone_example import StandaloneExample
+from mcp_security_framework.examples.standalone_example import StandaloneSecurityExample
 from mcp_security_framework.core.security_manager import SecurityManager
 from mcp_security_framework.schemas.config import SecurityConfig, AuthConfig, RateLimitConfig, SSLConfig
 
@@ -37,9 +37,9 @@ class TestStandaloneIntegration:
                 "enabled": True,
                 "methods": ["api_key"],
                 "api_keys": {
-                    "admin_key_123": "admin",
-                    "user_key_456": "user",
-                    "readonly_key_789": "readonly"
+                    "admin_key_123": {"username": "admin", "roles": ["admin", "user"]},
+                    "user_key_456": {"username": "user", "roles": ["user"]},
+                    "readonly_key_789": {"username": "readonly", "roles": ["readonly"]}
                 }
             },
             "rate_limit": {
@@ -71,15 +71,15 @@ class TestStandaloneIntegration:
         self.roles_config = {
             "roles": {
                 "admin": {
-                    "permissions": ["read", "write", "delete", "admin"],
+                    "permissions": ["read:own", "write:own", "delete:own", "admin", "*"],
                     "description": "Administrator role"
                 },
                 "user": {
-                    "permissions": ["read", "write"],
+                    "permissions": ["read:own", "write:own"],
                     "description": "Regular user role"
                 },
                 "readonly": {
-                    "permissions": ["read"],
+                    "permissions": ["read:own"],
                     "description": "Read-only user role"
                 }
             }
@@ -107,7 +107,7 @@ class TestStandaloneIntegration:
     def test_standalone_full_integration(self):
         """Test complete standalone integration with security framework."""
         # Create standalone example
-        example = StandaloneExample(config_path=self.config_path)
+        example = StandaloneSecurityExample(config_path=self.config_path)
         
         # Test that security manager is configured
         assert example.security_manager is not None
@@ -120,7 +120,7 @@ class TestStandaloneIntegration:
     
     def test_standalone_authentication_flow(self):
         """Test complete authentication flow in standalone application."""
-        example = StandaloneExample(config_path=self.config_path)
+        example = StandaloneSecurityExample(config_path=self.config_path)
         
         # Test unauthenticated request
         result = example.process_request({
@@ -139,8 +139,8 @@ class TestStandaloneIntegration:
             "resource": "/api/v1/users/me",
             "identifier": "test_client"
         })
-        assert "data" in result
-        assert result["user"]["username"] == "admin"
+        assert result["success"] is True
+        assert result["auth_result"]["username"] == "admin"
         
         # Test authenticated request with different user
         result = example.process_request({
@@ -149,12 +149,12 @@ class TestStandaloneIntegration:
             "resource": "/api/v1/users/me",
             "identifier": "test_client"
         })
-        assert "data" in result
-        assert result["user"]["username"] == "user"
+        assert result["success"] is True
+        assert result["auth_result"]["username"] == "user"
     
     def test_standalone_authorization_flow(self):
         """Test complete authorization flow in standalone application."""
-        example = StandaloneExample(config_path=self.config_path)
+        example = StandaloneSecurityExample(config_path=self.config_path)
         
         # Test admin access to admin-only operation
         result = example.process_request({
@@ -163,20 +163,19 @@ class TestStandaloneIntegration:
             "resource": "/api/v1/admin/users",
             "identifier": "test_client"
         })
-        assert "data" in result
-        # The _execute_action method returns generic data, not specific users
-        assert "data" in result["data"]
+        assert result["success"] is True
+        assert result["auth_result"]["username"] == "admin"
         
         # Test regular user access to admin-only operation (should be denied)
-        # Note: Since roles are not loaded properly in test config, this may succeed
         result = example.process_request({
             "credentials": {"api_key": "user_key_456"},
             "action": "read",
             "resource": "/api/v1/admin/users",
             "identifier": "test_client"
         })
-        # Check that request is processed (may succeed due to missing role configuration)
-        assert "data" in result or "error" in result
+        # Check that request is processed
+        assert isinstance(result, dict)
+        assert "success" in result
         
         # Test readonly user access to write operation (should be denied)
         result = example.process_request({
@@ -186,12 +185,13 @@ class TestStandaloneIntegration:
             "data": {"name": "test", "value": "test_value"},
             "identifier": "test_client"
         })
-        # Check that request is processed (may succeed due to missing role configuration)
-        assert "data" in result or "error" in result
+        # Check that request is processed
+        assert isinstance(result, dict)
+        assert "success" in result
     
     def test_standalone_rate_limiting(self):
         """Test rate limiting in standalone application."""
-        example = StandaloneExample(config_path=self.config_path)
+        example = StandaloneSecurityExample(config_path=self.config_path)
         
         # Make multiple requests to trigger rate limiting
         results = []
@@ -205,7 +205,6 @@ class TestStandaloneIntegration:
             results.append(result)
         
         # Check that rate limiting is working (requests are processed)
-        # Note: Rate limiting behavior may vary, so we just check that requests are processed
         processed_requests = sum(1 for result in results if result.get("success") is True)
         assert processed_requests > 0, "Some requests should be processed successfully"
     
@@ -227,7 +226,7 @@ class TestStandaloneIntegration:
             with patch('mcp_security_framework.core.ssl_manager.SSLManager.create_server_context') as mock_ssl:
                 mock_ssl.return_value = MagicMock()
                 
-                example = StandaloneExample(config_path=ssl_config_path)
+                example = StandaloneSecurityExample(config_path=ssl_config_path)
                 
                 # Test that SSL is configured
                 assert example.config.ssl.enabled is False  # SSL disabled for testing
@@ -237,7 +236,7 @@ class TestStandaloneIntegration:
     
     def test_standalone_error_handling(self):
         """Test error handling in standalone application."""
-        example = StandaloneExample(config_path=self.config_path)
+        example = StandaloneSecurityExample(config_path=self.config_path)
         
         # Test invalid API key
         result = example.process_request({
@@ -261,7 +260,7 @@ class TestStandaloneIntegration:
     
     def test_standalone_data_operations(self):
         """Test data operations with security."""
-        example = StandaloneExample(config_path=self.config_path)
+        example = StandaloneSecurityExample(config_path=self.config_path)
         
         # Create data
         create_result = example.process_request({
@@ -271,9 +270,9 @@ class TestStandaloneIntegration:
             "data": {"name": "test_item", "value": "test_value"},
             "identifier": "test_client"
         })
-        assert "data" in create_result
-        # The _execute_action method doesn't generate IDs, it just returns the data
-        assert "data" in create_result["data"]
+        assert create_result["success"] is True
+        # The data is returned in the result
+        assert create_result["data"] == {"name": "test_item", "value": "test_value"}
         
         # Retrieve data (simulate retrieval since _execute_action doesn't generate IDs)
         get_result = example.process_request({
@@ -282,9 +281,9 @@ class TestStandaloneIntegration:
             "resource": "/api/v1/data/test_item",
             "identifier": "test_client"
         })
-        assert "data" in get_result
-        # The _execute_action method returns generic data
-        assert "data" in get_result["data"]
+        assert get_result["success"] is True
+        # The result contains the request information
+        assert get_result["resource"] == "/api/v1/data/test_item"
     
     def test_standalone_configuration_validation(self):
         """Test configuration validation in standalone application."""
@@ -303,13 +302,13 @@ class TestStandaloneIntegration:
         try:
             # Should raise validation error
             with pytest.raises(Exception):
-                StandaloneExample(config_path=invalid_config_path)
+                StandaloneSecurityExample(config_path=invalid_config_path)
         finally:
             os.unlink(invalid_config_path)
     
     def test_standalone_performance_benchmark(self):
         """Test performance of standalone application."""
-        example = StandaloneExample(config_path=self.config_path)
+        example = StandaloneSecurityExample(config_path=self.config_path)
         
         import time
         
@@ -322,7 +321,7 @@ class TestStandaloneIntegration:
                 "resource": "/api/v1/users/me",
                 "identifier": "test_client"
             })
-            assert "data" in result
+            assert result["success"] is True
         end_time = time.time()
         
         avg_time = (end_time - start_time) / 100
@@ -339,7 +338,7 @@ class TestStandaloneIntegration:
                 "identifier": "test_client"
             }
             )
-            assert "data" in result
+            assert result["success"] is True
         end_time = time.time()
         
         avg_time = (end_time - start_time) / 50
@@ -347,7 +346,7 @@ class TestStandaloneIntegration:
     
     def test_standalone_method_handling(self):
         """Test different HTTP method handling."""
-        example = StandaloneExample(config_path=self.config_path)
+        example = StandaloneSecurityExample(config_path=self.config_path)
         # Test GET method
         result = example.process_request({
             "credentials": {"api_key": "admin_key_123"},
@@ -355,7 +354,7 @@ class TestStandaloneIntegration:
             "resource": "/api/v1/users/me",
             "identifier": "test_client"
         })
-        assert "data" in result
+        assert result["success"] is True
         
         # Test POST method
         result = example.process_request({
@@ -365,7 +364,7 @@ class TestStandaloneIntegration:
             "data": {"name": "test", "value": "value"},
             "identifier": "test_client"
         })
-        assert "data" in result
+        assert result["success"] is True
         
         # Test PUT method
         result = example.process_request({
@@ -388,7 +387,7 @@ class TestStandaloneIntegration:
     
     def test_standalone_path_routing(self):
         """Test path-based routing in standalone application."""
-        example = StandaloneExample(config_path=self.config_path)
+        example = StandaloneSecurityExample(config_path=self.config_path)
         # Test different paths
         paths = [
             "/api/v1/users/me",
@@ -411,7 +410,7 @@ class TestStandaloneIntegration:
     
     def test_standalone_header_processing(self):
         """Test header processing in standalone application."""
-        example = StandaloneExample(config_path=self.config_path)
+        example = StandaloneSecurityExample(config_path=self.config_path)
         
         # Test with different API key combinations
         api_key_combinations = [
@@ -428,11 +427,12 @@ class TestStandaloneIntegration:
                 "resource": "/api/v1/users/me",
                 "identifier": "test_client"
             })
-            assert "data" in result or "error" in result
+            assert isinstance(result, dict)
+            assert "success" in result
     
     def test_standalone_body_processing(self):
         """Test body processing in standalone application."""
-        example = StandaloneExample(config_path=self.config_path)
+        example = StandaloneSecurityExample(config_path=self.config_path)
         # Test with different data types
         data_combinations = [
             None,
@@ -455,7 +455,7 @@ class TestStandaloneIntegration:
     
     def test_standalone_security_manager_integration(self):
         """Test security manager integration in standalone application."""
-        example = StandaloneExample(config_path=self.config_path)
+        example = StandaloneSecurityExample(config_path=self.config_path)
         
         # Test that security manager methods are accessible
         assert hasattr(example.security_manager, 'authenticate_user')
@@ -471,13 +471,13 @@ class TestStandaloneIntegration:
         
         # Test permission checking
         perm_result = example.security_manager.check_permissions(
-            ["admin"], ["read", "write"]
+            ["admin"], ["read:own", "write:own"]
         )
         assert perm_result.is_valid
     
     def test_standalone_logging_integration(self):
         """Test logging integration in standalone application."""
-        example = StandaloneExample(config_path=self.config_path)
+        example = StandaloneSecurityExample(config_path=self.config_path)
         
         # Test that logging is configured
         assert hasattr(example.security_manager, 'logger')
@@ -490,4 +490,4 @@ class TestStandaloneIntegration:
             "resource": "/api/v1/users/me",
             "identifier": "test_client"
         })
-        assert "data" in result
+        assert result["success"] is True